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PROTECTION CIRCUIT AND METHOD FOR 
^FLOATING POWER TRANSFER DEVICE ~ 

The present invention relates in general to power transfer devices, and more 
particularly, to a protection circuit and protection method for low resistance switches of a 
floating power transfer device. 

Many system designs include power conversion circuitry to develop a required 

5 operating voltage. One such power conversion circuit is known as a charge pump. A charge 
pump is a device for creating increases in supply voltage or for inverting a supply voltage to 
generate a split supply. Many of these devices are related to applications using non-volatile 
memory circuits, which require a high voltage for programming. In a conventional charge 
pump power conversion circuit, the load device connects so that one terminal thereof is 

10 common to one of the supply terminals, typically the ground reference. U.S. Letters Patent 
No. 4,807,104 discloses a power conversion circuit which is both a voltage multiplying and 
inverting charge pump. However, the output of the power conversion circuit remains 
referenced to the ground node. 

In certain system implementations, it may be advantageous to power the system using 

15 a floating power transfer device. By floating the power transfer device, if a terminal in the 
system were to short, then the system may still be able to continue to operate. For example, 
in an automobile bus network, the signaling portion of the system on the bus could be 
floating relative to any other reference, such as ground or Vdd . This would provide 
enhanced fault tolerance by allowing communications to still occur notwithstanding a short at 

20 a terminal thereof. 

The shortcomings of the prior art are overcome and additional advantages are 
provided through the provision of a protection circuit for a floating power transfer device. 
The protection circuit includes a control circuit, a fault detection circuit and a precharge 
driver circuit. The control circuit controls switching of at least one switch of the floating 

25 power transfer device, where the at least one switch controls charging of a reservoir capacitor 
of the device across which a load is applied when in use. The fault detection circuit detects 
when a fault occurs in at least one of the floating power transfer device or the load, and sends 
a fault detect signal to the control circuit responsive thereto. The precharge driver circuit 
precharges the reservoir capacitor and is enabled by the control circuit responsive to receipt 

30 of the fault detect signal from the fault detection circuit. When enabled, the precharge driver 
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circuit attempts to precharge the reservoir capacitor to a voltage level sufficient for switching 
of the at least one switch to proceed without damaging the switch. 

In another aspect, a floating power transfer device is provided The floating power 
transfer device includes a reservoir capacitor across which a load is applied when in use and a 
5 power supply voltage for charging the reservoir capacitor. At least one switch is coupled 
between the power supply voltage and the reservoir capacitor to selectively connect and 
disconnect the power supply voltage from the reservoir capacitor. A protection circuit is 
provided for the at least one switch. This protection circuit includes a control circuit, a fault 
detection circuit and a precharge driver circuit The control circuit at least partially controls 

1 0 switching of the at least one switch of the floating power transfer device, while the fault 
detection circuit detects a fault in either the floating power transfer device or the load, and 
responsive thereto sends a fault detect signal to the control circuit The precharge driver 
circuit is enabled by the control circuit responsive to receipt of the fault detect signal, and 
when enabled, attempts to precharge the capacitor to a voltage level sufficient for switching 

15 of the at least one switch to proceed without damaging the at least one switch. 

In a further aspect, a method for protecting switches of a floating power transfer 
device is provided. This method includes: controlling switching of at least one switch, the at 
least one switch controlling charging of a reservoir capacitor of the floating power transfer 
device across which a load is applied when in use; monitoring at least one of the floating 

20 power device and the load for detecting a fault, and upon detecting a fault, generating a fault 
detect signal; and responsive to generating of the fault detect signal, attempting to precharge 
the reservoir capacitor to a voltage level sufficient for switching of the at least one switch to 
proceed without damaging the at least one switch. 

Additional features and advantages are realized through the techniques of the present 

25 inventioa Other embodiments and aspects of the invention are described in detail herein and 
are considered a part of the claimed invention. 

The subject matter which is regarded as the invention is particularly pointed out and 
distinctly claimed in the claims at the conclusion of the specification. The foregoing and 
other objects, features, and advantages of the invention are apparent from the following 

30 detailed description taken in conjunction with the accompanying drawings in which: 

FIG. 1 is a schematic of one embodiment of a ground referenced, power transfer 
device for supplying power to a load via a ground referenced capacitance; 
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FIG. 2 is a schematic of one embodiment of a floating power transfer device for 
delivering power to a load through a floating reservoir capacitance; 

FIG. 3 is a schematic of one embodiment of a protection circuit for a floating power 
transfer device, in accordance with an aspect of the present invention; 
5 FIG. 4 is a schematic of another embodiment of a protection circuit for a floating 

power transfer device, in accordance with an aspect of the present invention; 

FIG. 5 is a schematic of still another embodiment of a protection circuit for a floating 
power transfer device, in accordance with an aspect of the present invention; 

FIG. 6 is a schematic of one embodiment of a fault detection circuit for use in the 
10 protection circuit of FIGS. 3-5, in accordance with an aspect of the present invention; 

FIG. 7 is a schematic of one embodiment of a comparator with a gate-clamp 
referenced to the ground node for use in the fault detection circuit of FIG. 6, in accordance 
with an aspect of the present invention; 

FIG. 8 is a schematic of another embodiment of a comparator with a gate-clamp 
15 referenced to a positive supply for use in the fault detection circuit of FIG. 6, in accordance 
with an aspect of the present invention; and 

FIG. 9 is a detailed schematic of one embodiment of a precharge driver circuit for the 
protection circuits of FIGS. 3-5, in accordance with an aspect of the present invention. 

Reference is now made to the drawings, wherein the same reference numbers used 
20 throughout different figures designate the same or similar components. One embodiment of a 
power transfer device for powering a load 12 is show in FIG. 1. This charge transfer device 
delivers charge onto a capacitor 1 1 through a switch 13, under control of a signal generator 
15. Charge is provided by a power supply voltage (Vdd ) 14. The power transfer device of 
FIG. 1 is referred to as a ground referenced charge transfer device since the device supplies 
25 power to the load via a ground referenced capacitance. 

A floating version of a power transfer device is depicted in FIG. 2. In this figure, a 
load 2 1 is powered by a reservoir capacitance 22. Charge is delivered onto capacitor 22 
through switches 23 and 24, which are operated in tandem under control of a voltage switch 
signal 25. When both switches are closed (i.e., turned on), the power supply voltage (Vdd) 
30 26 is applied across the capacitor 22. This power transfer device is floating because capacitor 
22 is isolated from the grounded power supply 26 when the charging switches 23, 24 are 
opened (i.e., turned off). When the circuit is used to deliver power into a load device (e.g., as 
part of a voltage doubler), it is expected that there will be a permanent bias voltage across the 
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capacitor. The power delivered to the load creates a ripple voltage on the reservoir capacitor, 
superimposed onto the bias voltage. When switches 23, 24 are closed (Le., turned on), the 
lost charge (Q) is replenished and the reservoir capacitor voltage increases to the source value 
(Vdd). 

5 The load in FIGS. 1 or 2 may be of any type of circuit, including a replication of 

either circuit shown, with the capacitor (1 1 or 22) replacing the voltage source (14 or 26), 
respectively. In metal-oxide-semiconductor (MOS) integrated circuits, the switch is 
implemented by a transistor This device presents an on-resistance that determines the 
dynamics of the circuit operation. 

1 0 When the power transfer device is initially turned-on, or there is a shorting fault 

across the capacitor (or the load), the full supply voltage is applied across the switch devices. 
Normally these circuits are used in low power applications where the switch resistance may 
be quite high and the supply voltage is generally low (e.g., less than 5V). In such a case, it 
may not be necessary to protect against such operating conditions. 

15 However, start-up and fault conditions create a potentially damaging operating state if 

the charge transfer device is used to deliver power to the load. For such a device, switch 
transistors are made low ohmic to reduce system losses, which also diminishes power losses 
during the charging phase of operation. When there is no preexisting bias present on the 
reservoir capacitor (e.g., capacitor 1 1 or capacitor 22 in FIG. 1 or 2), it is possible for very 

20 high currents to flow through the switch. For example, with a 10 switch resistance, and a 
20V supply, a current of 20 A is possible, briefly dissipating 400 W. With discrete devices, 
this may be possible, but not with low cost integrated solutions. Normally, the circuit might 
present a IV difference across the switch, resulting in a more manageable current of 1A. 

Currently, floating charge transfer devices concentrate on low power systems that can 

25 absorb the increase in power during start-up. In these systems, the switches are generally of 
higher impedance than in the case of a floating power transfer device such as discussed 
herein. 

Thus, provided herein is a protection circuit and protection method to prevent 
excessive currents and power dissipation during, for example, start-up or fault conditions, in 
30 floating capacitor charge circuits, referred to herein as floating power transfer devices. The 
protection circuit described below is able to directly or indirectly detect, for example, a low 
voltage across the reservoir capacitor during either phase of operation. One characteristic of 
the floating capacitance is the ability of the capacitor to float above or below the power 
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supply ground reference during the period that the switches are disabled (i.e., turned off). 
Also, one issue to be addressed in providing a protection circuit for the switches is that the 
detection of a fault needs to be communicated from the floating capacitor side of the power 
transfer device (i.e., nodes Cap+, Cap-) to the grounded supply side (i.e., nodes Vdd, gnd). 

5 One embodiment of a floating power transfer device and protection circuitry, in 

accordance with an aspect of the present invention, is depicted in FIG. 3- The device 
includes a pair of switches 36, 37, used during normal operation, a reservoir capacitor 35, and 
a power source 49 connected at one end to ground 48. These components, taken together, 
form a circuit similar to that depicted in FIG. 2. This circuit supplies power to a load 50 

10 when in use. 

The protection circuitry includes a fault detection circuit 33, which can directly or 
indirectly monitor voltage across capacitor 35. In this example, fault detection circuit 33 is 
connected between terminals Cap+ 31 & Cap- 32, possibly deriving its power supply from 
the same terminals. The fault detection circuit may be a passive detector that is capable of 

15 operating over all possible voltages, from 0V up to an arbitrary maximum. A fault is 

determined to occur, in one example, when voltage across reservoir capacitor 35 Mis below 
a fault threshold. This threshold is set low enough to allow normal operation, while high 
enough to prevent damage from occurring due to excessive currents flowing through the 
switches 36, 37. For instance, with a 20V supply, and a switch resistance of 1 0, a maximum 

>0 current of 2A would set a minimum capacitor voltage of 16V before protection is required. 
So, if a short occurs during normal operation, or some other event causes the capacitor 
voltage to fall below the fault threshold (e.g., 1 6V in this example), then a fault detect signal 
46 is asserted. This signal is transferred to a control circuit 43 through a floating-to-ground 
shifter 34 as output 45 from the floating level shift circuit. Circuit 34 connects between 

15 floating nodes 31, 32, as well as between the ground referenced nodes 41, 40. Control circuit 
43 may be implemented as a logic circuit, or as a program which processes the fault detect 
signal and decides whether to allow the main switches 36 & 37 to turn-on. 

At turn-on, there is a voltage available from source 49, but reservoir capacitor 35 is 
completely discharged, i.e., the capacitor voltage is 0V. In this case, a fault is detected by the 

30 fault detection circuit 33 and its presence is signaled to control circuit 43. To enable switches 
36, 37 while the capacitor remains in this state would lead to the failure of the switches. This 
might be an immediate failure, or it may manifest itself as a curtailed lifetime for the 
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components, depending upon the time taken to restore the capacitor's voltage to its normal 
state. 

In one implementation, the control circuit 43 serves as an interface between the 
normal control logic and switches 36, 37. Control signals from an external device determine 
5 the switch state (on node switch 44), through interface node uPIO 42. The feultJN connects 
through the float level shift circuit 34 to the fault detection circuit 33. Additional signals 
indicating a fault state may be made available to the external device through interface uPIO 
42. 

When a fault is asserted, the control block 43 insures that the switches 36, 37 are 

0 disabled, preventing further dissipation by these switches. On the next appropriate control 
phase (ie., when the switches would normally be enabled), a separate precharge driver circuit 
47 is enabled This circuit 47 is capable of delivering charge to the reservoir capacitor 35 
without causing damage to the circuit It achieves this by using current-limited output 
devices that prevent the charging process from causing excessive power dissipation. When 

[5 the switch on (SWON) input to recharge driver circuit 47 is enabled, outputs 38, 39 turn-on 
and the capacitor charges. The control circuit 43 may enable these outputs 38, 39 
continuously until the detected fault condition is removed, or it may cycle through charging 
and hold phases, emulating the normal mode of operation. By this method, the protection 
circuit prevents damaging currents from flowing through the power transfer device during the 

>0 start-up phase. One consequence of this technique is the requirement for a minimum start-up 
period before normal operation is commenced The duration of this period is determined by 
the various factors affecting the circuit operation and the level of protection required. In a 
practical implementation, an additional delay of several normal switch cycles may be added 
to insure that the system has reached a stable operating state before enabling the complete 

15 circuit An external control device may be aware of the start-up condition and use that 

information to enable the start-up sequence described above. la such a case, it is possible to 
use different control sequences for start-up and fault conditions. 

When a fault occurs during normal operation that causes, for example, the voltage on 
capacitor 35 to fall below the set feult threshold, then switches 36, 37 are turned off and the 

30 control block 43 attempts to restart the circuit This may follow the full start-up cycle (when 
there is no distinction between start-up and fault), or it may follow a shortened cycle. A 
shortened cycle would charge the capacitor 35, then turn-off the precharge driver circuit 47 
and evaluate the feult signal agaia If no further feult state is detected, then controlis 
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returned to normal operation. With the full cycle, a repeated start-up attempt is made. When 
a predetermined number of attempts is exceeded, the circuit is resolved to be in a fault state 
and the control circuit 43 disables further attempts until reset by some external control. A 
fault state signal can be passed back to the external control through the uPIO node 42. 

FIG. 4 depicts a refinement of the protected, floating power transfer device of FIG. 3. 
In this embodiment, a thermal detection circuit 60 is provided to complement the fault 
detection. Temperature detection can be useful when the device and detection circuit are 
implemented on a single integrated circuit (IC). When a fault occurs and the circuit operates 
close to the fault detection threshold, the IC may show excessive power dissipation. The chip 
temperature increases rapidly when this happens and the thermal detection circuit 60 can 
detect a temperature change beyond the normal expected operating range. The output signal 
61 asserts a fault to the control circuit 43. In this case, the type of fault can be registered and 
output switches 36, 37 disabled. A restart can be attempted and if the fault is detected again, 
the control circuitry can flag the fault back to the external logic, again, by the uPIO 42 
interface. When this happens, the control circuit prevents any further operation of the 
switches until an external signal initiates a re-start The balance of the protection circuit and 
floating power transfer device depicted in FIG. 4 operates as described above in connection 
with FIG. 3. 

In certain circumstances, the protection circuitry of FIGS. 3 & 4 may be simplified by 
eliminating the float level shift circuit 34 of those figures. The resulting implementation is 
depicted in FIG. 5. By eliminating the float level shift circuit, fault detection becomes 
possible only while switches 36, 37 are enabled The output of the fault detection circuit 43 
is also now referenced to the ground node 48. The operating principal of this variation has 
the fault detection occurring during the first part of the switch closure phase. Alternatively, 
the low-current precharge driver circuit 47 can be enabled prior to the switches, allowing a 
short detection phase to occur ahead of the principal power phase, which enables the switches 
36, 37. When this method is employed, it is possible for the detection circuit connected 
between the capacitors to be mainly passive devices. 

Various specific details of implementation of the protection circuit embodiments of 
FIGS. 3-5 are described below with reference to FIGS. 6-9. The protection circuit described 
herein can form part of a custom IC that uses double-diffused metal-oxide semiconductor 
(DMOS) transistors for the switching devices. A silicon-on-insulator (SOI) structure allows 
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individual transistors to be electrically isolated from one another. The fault detection could 
follow the form shown in FIG. 5, using passive detection devices. 

FIG. 6 depicts one embodiment of a fault detection circuit 33. This circuit includes a 
fault reference generating circuit 70, producing two output reference values 78, 79 (i.e., ref- 
78 relative to ground, and ref+ 79 relative to the positive supply 49). Two comparators 71 & 
72 compare these reference voltages to the voltages on the reservoir capacitor 35 during the 
period that the switches are closed (i.e., turned on). This allows the detection of excess 
voltage drops across individual switches 36, 37. The reason for this is to enable the detection 
of shorts on the capacitor output nodes 3 1, 32. A short may only show a fault at one terminal, 
so both should be tested to insure full coverage of potentially damaging fault conditions. The 
resulting outputs may be combined into a single fault detect signal or flag 46. The 
comparators have high impedance inputs and gate clamps to protect their inputs from damage 
during the floating phase of operation. The fault reference generating circuit 70 may be any 
circuit capable of generating voltage references relative to both supplies. The values required 
for the reference voltages are determined by the switch resistance and the ability of the IC to 
dissipate power. 

Other embodiments of the comparator circuitry 72, 71 for the fault detection circuit 33 
of FIG. 6 are depicted in FIGS. 7 & 8, respectively. A comparator with a gate-clamp 
referenced to the ground node is depicted in FIG. 7, while a positive supply referenced gate- 
clamp is shown in FIG. 8. The operating principle is the same for both. The high value 
series input resistor R 84, 83 isolates the input from the comparator 72, 71 of FIGS. 7 & 8, 
respectively. A zener diode 86, 96 clamps the comparator input to a voltage that does not 
exceed its input breakdown voltage. If the input swings beyond the supply voltage (ground 
or Vdd in FIGS. 7 & 8, respectively), then the zener diode 86, 96 acts like a diode and limits 
the input swing in the opposite direction. 

The precharge driver circuit 47 in FIGS. 3-5 may be any circuit that can be controlled, 
and is capable of limiting the current delivered to the capacitor reservoir 35. In one 
implementation, the precharge driver circuit can act as a current source on both output 
terminals. In the absence of a fault, the reservoir capacitor charges at a predetermined rate. 
As the capacitor charges, the current-source behavior changes from current source to a high- 
impedance switch. The actual switch impedance is set to allow the start-up time to be 
minimized, without introducing damaging power dissipation. 
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The circuit of FIG. 9 shows one implementation of the precharge driver circuit 47, 
which includes a current reference sub-block and an output section. A current source 101 
defines a low-value current (e.g., 2^A). Transistors 102, 103, 104 form a current mirror with 
two outputs, including node SRC- 126, that reflect the reference current The output from 

5 transistor M_l 103 is used in the complementary current mirror formed by transistors 105, 
106, creating a single output node SRC+ 127. Two switches 108, 109 controlled by the 
ENABLE input 107 disable the outputs SRC+, SRC- of the current reference sub-block The 
complementary output sections 112, 113, 121, 122, 123, 124, 125 and 114, 115, 116, 117, 
1 1 8, 1 19, 120 create current-limited outputs controlled by the ENABLE input When 

;0 switches 120, 121 are on, the outputs are off and no current is available at the terminals SW+ 
andSW- 125, 119. The output diodes 118, 124 insure that the implicit diodes of the output 
DMOS transistors 1 16, 123 are never forward biased when the reservoir capacitor (connected 
between the SW+ and SW- terminals 125, 1 19), is floating relative to ground 111, Current 
scaling is used to boost the reference current by a factor of 10% in the current reference sub- 

15 block. A further 200% is obtained by a combination of resistor 1 12, 1 13 ratio and transistor 
ratio 122, 123, for output SW+ 125. Output SW- 1 19 is scaled in a similar manner. 

The overall accuracy obtained by the precharge driver circuit is not critical to its 
performance. Its primary function is to enable the safe charging of the reservoir capacitor 
after the circuit is started or a fault is detected The timing of the start-up may be improved 

10 by tighter control of the charging currents, but the benefit has to be weighed against increased 
circuit complexity. In normal operation, the precharge driver circuit 47 may switch only 
during the controlled start-up, or it may switch continuously in synchronism with the main 
switches 36, 37. 

The control circuit 43 (see FIGS. 3-5) contains the digital functionality for the system. 
25 This control circuit receives a fault detect signal, responds thereto by turning off the switches 
36, 37 and report backs to an external device. The external device may initiate the start-up 
(assuming an a-priori knowledge of the system) through the startjcontrol circuit 43. 

Although preferred embodiments have been depicted and described in detail herein, it 
will be apparent to those skilled in the relevant art that various modifications, additions, 
30 substitutions and the like can be made without departing from the spirit of the invention and 
these are therefore considered to be within the scope of the invention as defined in the 
following claims. 



